Support Post link can be bypassed on quoted message

[todo10]

A member with no permissions to post links was able to bypass the filter by inserting the link in the quote:

[QUOTE="Mandy Onderwater, post: 31475, member: 3896"]
Ahh, this is a topic I sadly don't know anything about. We always hired a professional (or asked experienced neighbours for help). Our house always had roof tiles though, and that's something we did ourselves. We kept a stack of spare tiles behind the shed [URL='https://liferaplumbing.ca/plumber-vancouver/'][COLOR=rgb(0, 0, 0)]learn more[/COLOR][/URL], for anytime one broke and/or fell during storms. Especially as they stopped making that particular type, haha.

Something people also forget to consider is; do you still feel safe (and/or fit enough) to go on a ladder and onto your roof. If the potential harm is not worth it to you, definitely hire someone.

It sounds like an "easy" job. But just because it [I]sounds[/I] easy, doesn't mean it [I]is [/I]easy.
[/QUOTE]
also thank you for your suggestion

 

[CRUEL-MODZ]

Hello

A member with no permissions to post links was able to bypass the filter by inserting the link in the quote:

[QUOTE="Mandy Onderwater, post: 31475, member: 3896"]
Ahh, this is a topic I sadly don't know anything about. We always hired a professional (or asked experienced neighbours for help). Our house always had roof tiles though, and that's something we did ourselves. We kept a stack of spare tiles behind the shed [URL='https://liferaplumbing.ca/plumber-vancouver/'][COLOR=rgb(0, 0, 0)]learn more[/COLOR][/URL], for anytime one broke and/or fell during storms. Especially as they stopped making that particular type, haha.

Something people also forget to consider is; do you still feel safe (and/or fit enough) to go on a ladder and onto your roof. If the potential harm is not worth it to you, definitely hire someone.

It sounds like an "easy" job. But just because it [I]sounds[/I] easy, doesn't mean it [I]is [/I]easy.
[/QUOTE]
also thank you for your suggestion

Yes, I'll see what I can do.

Regards, CRUEL-MODZ

 

[CRUEL-MODZ]

A member with no permissions to post links was able to bypass the filter by inserting the link in the quote:

[QUOTE="Mandy Onderwater, post: 31475, member: 3896"]
Ahh, this is a topic I sadly don't know anything about. We always hired a professional (or asked experienced neighbours for help). Our house always had roof tiles though, and that's something we did ourselves. We kept a stack of spare tiles behind the shed [URL='https://liferaplumbing.ca/plumber-vancouver/'][COLOR=rgb(0, 0, 0)]learn more[/COLOR][/URL], for anytime one broke and/or fell during storms. Especially as they stopped making that particular type, haha.

Something people also forget to consider is; do you still feel safe (and/or fit enough) to go on a ladder and onto your roof. If the potential harm is not worth it to you, definitely hire someone.

It sounds like an "easy" job. But just because it [I]sounds[/I] easy, doesn't mean it [I]is [/I]easy.
[/QUOTE]
also thank you for your suggestion

I don't have this problem on Xen-Soluce and on my localhost :/ have you configured the authorizations correctly?

 

[todo10]

I don't have this problem on Xen-Soluce and on my localhost :/ have you configured the authorizations correctly?

Yes I did

 

[CRUEL-MODZ]

Personally it works well on xen-soluce, you can test here to send a link you will not be able to

 

[todo10]

Personally it works well on xen-soluce, you can test here to send a link you will not be able to

Unfortunately no, I can't reproduce the bug here but the user actually doesn't have permissions to post links and he is able to post them so there is something going on. I can give you access to the forum so you can have a look.

A new user was able to bypass the link check again so it's happening on the latest addon version

 

[CRUEL-MODZ]

Yes give me access so I can test this

 

[todo10]

Yes give me access so I can test this

Yes, the user was able to post again.

This is the post he made:
selfsufficientculture. com/threads/best-way-to-infuse-thyme-into-simple-syrup.4041/post-31842

I don't know how he does it. Apparently he post and then quotes the post and add the link, maybe he is able to bypass the spam filter by quoting a message and inserting the link inside it.

 

[CRUEL-MODZ]

I don't understand, the option was already deactivated:

So yes I could post a message with a link, I activated the option is I can not post :

 

[todo10]

That was wrong in terms of UI/UX then, it's definitely confusing. I, as an admin, couldn't post a link so I didn't understand why this user was able.